To configure SSO, you must be a tenant admin or owner. By default, the tenant owner is the person who created the tenant and is the first tenant admin. There can be multiple tenant admins.